Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e20323032.roa
File:                     3138312e3139342e302e302f31352d3234203d3e20323032.roa (raw, json)
Hash identifier:          OYhwS43mR2ewYgjzrQmx/HGngb+vd3n3OzgC2OLtFjc=
Subject key identifier:   BA:01:88:63:5C:FF:B2:49:45:33:04:59:8C:35:BC:D5:63:BF:11:0B
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       6CA78D44664728B8DC4781976215B7562249CA35
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 18:02:49 +0000
ROA not before:           Tue 05 Mar 2024 17:57:49 +0000
ROA not after:            Tue 04 Mar 2025 18:02:49 +0000
asID:                     202
IP address blocks:        181.194.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a7:8d:44:66:47:28:b8:dc:47:81:97:62:15:b7:56:22:49:ca:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:49 2024 GMT
            Not After : Mar  4 18:02:49 2025 GMT
        Subject: CN=BA0188635CFFB249453304598C35BCD563BF110B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:55:22:c7:3c:94:e8:a9:42:96:39:c2:6a:
                    0c:6c:38:af:70:e6:ef:29:60:79:43:7d:7d:9d:4f:
                    b3:f7:3c:33:f3:4b:f2:20:34:ba:29:60:4b:cb:5a:
                    d8:78:dd:9b:3c:ff:f8:76:5b:42:43:9d:7e:44:9f:
                    02:ed:06:f8:cc:e8:90:a4:59:06:33:5d:42:ba:8b:
                    0f:bc:2e:27:1f:c1:2b:96:4f:08:68:40:8f:ba:9e:
                    ae:1f:76:00:8c:ae:d5:fe:f7:43:c5:95:74:2b:5b:
                    96:97:60:a1:e0:ac:b2:44:eb:a0:53:fe:9b:8a:95:
                    04:6a:a0:f8:18:f6:57:3a:0f:f1:0b:45:11:2a:e9:
                    97:57:db:03:ec:2f:4b:65:47:2b:40:75:fd:2e:9d:
                    be:10:48:02:5e:15:5e:8d:df:fd:63:d8:aa:48:9f:
                    fb:33:67:c2:5d:b4:3d:50:6d:e8:e1:fc:27:7c:6c:
                    9e:d4:be:9a:59:f2:6f:ac:bb:90:f5:bc:27:bf:45:
                    e2:b3:26:69:f0:41:d6:a8:e8:40:77:27:f4:b4:56:
                    7b:0c:b7:45:3e:fb:b5:4b:2d:aa:42:9d:f0:0a:85:
                    57:50:21:a5:f5:44:f8:f3:92:b4:82:56:b2:37:d4:
                    82:e9:d4:59:c8:6d:c1:44:54:c3:c1:e1:ef:c1:06:
                    d1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:88:63:5C:FF:B2:49:45:33:04:59:8C:35:BC:D5:63:BF:11:0B
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.194.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:61:8e:60:79:d9:e2:3e:6f:38:90:f4:dc:1f:72:f3:4f:
         da:e6:29:e2:10:b1:66:08:04:ed:19:f3:69:fa:46:fe:4b:e1:
         d4:ae:b4:cf:97:c9:19:11:9a:8d:0d:78:a1:99:1f:f7:59:70:
         b6:89:c4:c3:07:38:20:51:88:a5:37:2e:36:54:ac:b4:00:8e:
         18:30:d6:a8:94:da:02:f2:4c:39:e9:48:93:da:c2:f5:70:9b:
         47:8f:86:fc:b9:a7:ec:60:84:6d:5c:c5:ab:59:99:9a:16:e2:
         62:4b:28:72:2a:1b:25:a8:8e:73:ea:a6:a5:c6:eb:4b:54:14:
         b0:da:65:3b:42:55:e9:ed:84:f8:a2:19:3c:ee:83:84:8f:1e:
         03:52:40:2a:ca:57:96:d7:db:5b:4b:e6:03:db:d0:56:33:63:
         17:eb:61:f4:a4:da:49:b1:23:10:f9:55:3b:4e:d2:77:09:df:
         11:44:45:07:9c:2a:b9:bb:8e:0e:3c:10:a1:46:3c:d8:2d:06:
         3b:98:b7:80:f4:22:29:90:12:c2:47:1d:6d:b9:fd:bd:09:83:
         19:0d:ba:ec:93:b5:08:f3:e3:be:f5:c1:04:61:e0:3e:8c:3f:
         47:6f:d3:8d:ee:e9:f4:7f:43:d5:9d:cc:5c:da:b1:09:9d:a9:
         f4:28:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org